Privacy policy
Last updated 20 August 2026
How LocaLoca collects, uses, and protects the data you and your clients trust us with.
LocaLoca is a tool that agencies and freelance marketers use to run Google Business Profile work for their clients. To do that job we handle two kinds of data. There is data about you, the person who pays for the account. And there is data about your clients and their business listings, which you bring with you.
This page explains both in plain language. If anything here is unclear, write to hello@localoca.com and a person will answer.
Who we are. LocaLoca is operated from Pune, India. In this policy “we”, “us”, and “LocaLoca” mean the company that runs the LocaLoca service. “You” means the account holder. “Your clients” means the businesses whose listings you manage through LocaLoca.
What we collect
Information you give us
| What | Why we need it |
|---|---|
| Name and work email | To create your account and contact you about it |
| Workspace and agency name | To label your workspace and brand client reports |
| Billing details | To take payment and issue invoices |
| Your logo and brand colours | To white label the reports your clients receive |
| Anything you write to support | To answer your question |
We do not store full card numbers. Payments are handled by our payment processor, which sends us only the last four digits, the card brand, and the result of the charge.
Information about your clients
When you connect a client, we receive and store the data needed to do the work:
- Business name, address, phone number, website, hours, categories, and services
- Photos and videos you or your client upload
- Reviews, review replies, and customer questions on the listing
- Performance figures Google reports, such as calls, direction requests, and searches
- Map position readings we take for the keywords you choose
You are the one who decides which clients go into LocaLoca. You are responsible for having the right to give us that access. We act on your instructions when we handle it.
Information we collect automatically
- Log data such as IP address, browser, device type, and pages visited
- Timestamps and outcomes of every action the product takes on a listing
- Error reports when something in the product breaks
We use a small number of first party cookies to keep you signed in and to remember your settings. We use privacy friendly analytics to count page views on our marketing site. We do not run advertising trackers on the product.
How we use it
- To run the work you have asked for on your clients’ listings
- To draft posts, review replies, and answers for your approval
- To measure map position and build the reports you send
- To keep a change journal so every write can be traced and reversed
- To bill you, support you, and tell you about changes to the service
- To find and fix bugs, and to keep the service secure
We do not sell your data. We do not sell your clients’ data. We do not use your clients’ listing content to train a general purpose model for anyone else’s benefit.
Google user data
LocaLoca connects to Google Business Profile with your permission through Google OAuth. We ask only for the scopes needed to read and update the listings you select.
- We use Google user data only to provide the features described on this site
- We do not transfer Google user data to third parties except the service providers listed below, and only to run the service
- We do not use Google user data for advertising
- You can disconnect a Google account at any time from your workspace settings, or from your Google account permissions page
Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Artificial intelligence in the product
LocaLoca uses large language models to draft posts, review replies, and answers. To do that, listing content and review text may be sent to our model provider for processing.
- We use business API tiers where the provider does not train on our data
- Drafts are stored in your workspace so you can read, edit, or reject them
- You can require human approval before anything publishes, per client or per field
- Category, name, address, and phone changes are always held for a human by default
Who we share it with
We use a small set of service providers, and only what they need to do their job:
| Provider | What they do |
|---|---|
| Cloud hosting and database | Run and store the application |
| Read and update the listings you connect | |
| Model provider | Generate drafts you review |
| Payment processor | Take payment and issue invoices |
| Email provider | Send account email and the reports you schedule |
| Error and log tooling | Tell us when something breaks |
We may also share information when the law requires it, to protect our rights or someone’s safety, or as part of a merger or sale. If ownership ever changes we will tell you before your data moves.
Where data lives
Our servers and backups sit with cloud providers in the United States and the European Union. Our team works from India. That means your data may be accessed from and stored in countries other than your own. When we move personal data out of the United Kingdom or the European Economic Area we rely on Standard Contractual Clauses.
How long we keep it
- Account data lives for as long as your account is open
- Client listing data and the change journal live for as long as the client is in your workspace
- After you close your account we delete or anonymise your data within 90 days, except where we must keep records for tax and accounting
- Backups roll off on a 35 day cycle
You can ask us to delete a client sooner. Deleting a client from LocaLoca does not change anything on the Google listing itself. The improvements stay.
Your rights
Depending on where you live, you can ask us to:
- Give you a copy of the data we hold about you
- Correct anything that is wrong
- Delete your data
- Restrict or object to how we use it
- Export your data in a portable format
- Withdraw a permission you gave earlier
Write to hello@localoca.com and we will answer within 30 days. We will never charge you for a request and we will never make the product worse because you made one.
If your clients ask you to act on their behalf, you can export or delete their data from your workspace directly. Where we handle client data we act as a processor and you are the controller.
Security
- All traffic runs over TLS
- Data is encrypted at rest
- Access to production is limited, logged, and requires two factor authentication
- Secrets and Google tokens are stored encrypted and are never written to logs
- Every write to a client listing is logged with the old value kept
No system is perfect. If we discover a breach that affects you, we will tell you and the relevant regulator within the time the law allows, and we will tell you what we know rather than waiting for a complete picture.
Children
LocaLoca is a business tool. It is not for anyone under 16, and we do not knowingly collect data about children.
Changes to this policy
When we change something that matters we will email the account holder and update the date at the top of this page. Small wording fixes we will just make.